Hi,
Your .env file with Supabase credentials is committed to this public repo, exposing the Supabase URL and anon key.
Fix:
- git rm --cached .env
- Add .env to .gitignore
- Rotate keys in Supabase dashboard
- Verify RLS policies
If helpful: https://buymeacoffee.com/muhamedfazalps
Best,
A security researcher
Hi,
Your .env file with Supabase credentials is committed to this public repo, exposing the Supabase URL and anon key.
Fix:
If helpful: https://buymeacoffee.com/muhamedfazalps
Best,
A security researcher